$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft File: x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft (raw, json) Hash identifier: /Ovm/n3oJ9tCMJQPbKxj6DiOAlmWw3Cg56qAEhSc0R4= Subject key identifier: C7:C8:9F:AD:32:DA:75:00:BB:53:9F:9B:82:98:99:A9:95:B3:FA:A8 Authority key identifier: C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B Certificate issuer: /CN=A91E3377/serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Certificate serial: 055D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft Manifest number: 0558 Signing time: Sun 22 Jun 2025 22:53:05 +0000 Manifest this update: Sun 22 Jun 2025 22:53:04 +0000 Manifest next update: Sun 29 Jun 2025 22:53:04 +0000 Files and hashes: 1: x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl (hash: UNgvyT79rRCLYsZsJlF0dfVPxWYacBaugKXd6tXlFHI=) 2: 4756B350EF9011EBAAE0375AC4F9AE02.roa (hash: H5pjI/DUhiXyW6sQwhGG/wb5HeJLy8aTxQs1mqyRqSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 22:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1373 (0x55d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3377, serialNumber=C77C1309F4A1530EA395414528815F9C767C515B Validity Not Before: Jun 22 22:53:04 2025 GMT Not After : Jun 29 22:53:04 2025 GMT Subject: CN=68588951-89a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:10:93:6f:4e:a9:1a:a0:b6:1d:0a:26:a5:e5: c6:72:88:f2:1e:d5:5e:0e:df:74:46:a9:15:3f:13: 6b:44:7e:f3:73:68:32:b1:3e:72:47:33:00:1f:c1: 26:28:e7:4b:24:8c:d3:18:da:da:1e:5a:cd:6a:06: 3b:52:c9:ad:50:ae:cd:de:2c:17:92:cc:c7:b3:61: 6a:12:d6:2c:d8:8a:13:ea:a8:33:d9:2d:31:35:32: 95:c8:98:a1:57:7a:93:6a:15:e7:5f:ec:71:b2:e0: 59:b5:dc:dc:49:51:1f:83:51:71:bc:83:fa:f3:f3: 5b:2f:35:3b:08:24:6e:34:ac:42:08:54:ef:91:19: ef:c5:dc:ab:ef:27:e4:0d:ca:5e:5a:fd:8e:84:a7: 85:96:ce:e0:c9:85:43:28:06:ec:e0:28:f8:b5:9d: 15:0c:2b:5d:a0:57:30:3c:9e:29:ba:3f:6d:70:9a: 00:5d:e6:3c:8f:16:10:a2:ff:87:02:7a:25:0c:ab: 6c:78:7c:bb:b2:ba:9d:29:0a:69:28:a0:45:cc:6f: 9e:2a:01:7a:6d:25:a8:7d:11:e4:11:dc:04:09:ad: f8:17:7c:dc:47:8d:1f:36:c4:52:8a:25:0c:67:f6: 31:e1:b9:da:91:a1:ce:42:c6:a2:e2:d3:d0:b9:7a: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C8:9F:AD:32:DA:75:00:BB:53:9F:9B:82:98:99:A9:95:B3:FA:A8 X509v3 Authority Key Identifier: keyid:C7:7C:13:09:F4:A1:53:0E:A3:95:41:45:28:81:5F:9C:76:7C:51:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x3wTCfShUw6jlUFFKIFfnHZ8UVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3377/60B77DAEEF8E11EBB0DA4E59C4F9AE02/x3wTCfShUw6jlUFFKIFfnHZ8UVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3c:10:5d:e6:27:f8:59:ec:43:a3:47:3d:f4:36:a6:fd:d5: da:5c:05:b4:fd:58:2a:28:27:b3:f1:65:de:9e:07:44:af:1c: 4a:14:18:f4:2b:fd:c4:9d:2d:7d:6d:11:ed:ca:6c:16:af:7f: bf:a7:b2:b3:a1:a8:12:b3:de:88:30:07:8b:be:e3:7b:da:09: a8:28:ed:ae:0e:b8:b4:92:92:54:8f:ff:f5:62:3e:45:fa:8f: 26:78:f7:0a:54:e2:e3:4d:5b:15:a9:c2:f9:9c:16:ec:7f:bc: dc:d0:b7:5e:16:9a:8c:11:4f:22:cb:4b:24:b8:3f:e7:02:f0: 3e:ea:33:63:c9:ba:85:99:3d:be:34:64:e1:83:3d:62:38:3b: 86:6c:0c:d4:df:9a:ca:2a:9f:69:18:bb:ea:2b:f1:65:3e:33: 16:83:c4:62:7a:33:d7:a4:b6:ea:b2:ea:ee:23:fa:dd:c7:96: d8:67:99:46:dd:22:9c:17:62:ef:3d:0f:35:4e:6d:6c:11:a2: 84:83:7e:86:4f:bc:90:c8:0e:20:0a:af:ea:6a:dc:2d:0e:5d: 48:5e:ec:b7:2b:fa:e3:a0:7c:d2:54:90:2c:18:4e:aa:65:c8: 1b:41:2a:22:66:2b:b9:f9:d2:65:11:d1:74:39:33:fd:e9:8b: ef:cc:1d:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTMzNzcxMTAvBgNVBAUTKEM3N0MxMzA5RjRBMTUzMEVBMzk1NDE0NTI4ODE1RjlD NzY3QzUxNUIwHhcNMjUwNjIyMjI1MzA0WhcNMjUwNjI5MjI1MzA0WjAYMRYwFAYD VQQDEw02ODU4ODk1MS04OWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BCTb06pGqC2HQompeXGcojyHtVeDt90RqkVPxNrRH7zc2gysT5yRzMAH8Em KOdLJIzTGNraHlrNagY7UsmtUK7N3iwXkszHs2FqEtYs2IoT6qgz2S0xNTKVyJih V3qTahXnX+xxsuBZtdzcSVEfg1FxvIP68/NbLzU7CCRuNKxCCFTvkRnvxdyr7yfk DcpeWv2OhKeFls7gyYVDKAbs4Cj4tZ0VDCtdoFcwPJ4puj9tcJoAXeY8jxYQov+H AnolDKtseHy7srqdKQppKKBFzG+eKgF6bSWofRHkEdwECa34F3zcR40fNsRSiiUM Z/Yx4bnakaHOQsai4tPQuXrmUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfIn60y 2nUAu1Ofm4KYmamVs/qoMB8GA1UdIwQYMBaAFMd8Ewn0oVMOo5VBRSiBX5x2fFFb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzM3Ny82MEI3N0RBRUVG OEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3NmpsVUZGS0lGZm5IWjhV VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gzd1RDZlNoVXc2amxVRkZLSUZmbkhaOFVWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzM3Ny82MEI3N0RBRUVGOEUxMUVCQjBEQTRFNTlDNEY5QUUwMi94M3dUQ2ZTaFV3 NmpsVUZGS0lGZm5IWjhVVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqPBBd5if4WexDo0c99Dam/dXaXAW0/VgqKCez8WXengdErxxKFBj0 K/3EnS19bRHtymwWr3+/p7KzoagSs96IMAeLvuN72gmoKO2uDri0kpJUj//1Yj5F +o8mePcKVOLjTVsVqcL5nBbsf7zc0LdeFpqMEU8iy0skuD/nAvA+6jNjybqFmT2+ NGThgz1iODuGbAzU35rKKp9pGLvqK/FlPjMWg8RiejPXpLbqsuruI/rdx5bYZ5lG 3SKcF2LvPQ81Tm1sEaKEg36GT7yQyA4gCq/qatwtDl1IXuy3K/rjoHzSVJAsGE6q ZcgbQSoiZiu5+dJlEdF0OTP96YvvzB3x -----END CERTIFICATE-----Generated at Tue Jun 24 14:25:01 2025 by rpki-client